$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: yRgSPHoaD+TtEyNE1jHU4V1398BenmD/1DJdzXYHqXg= Subject key identifier: BF:7B:A7:C0:8A:74:97:9A:EF:08:CE:E5:61:B5:D2:25:B6:74:53:F7 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 4EFA959B2EDB31BEAC2C2930C115629EA5C64CEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 016A Signing time: Thu 21 Aug 2025 18:52:05 +0000 Manifest this update: Thu 21 Aug 2025 18:47:05 +0000 Manifest next update: Mon 25 Aug 2025 01:04:05 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 2: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) 4: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: yVmCJpn+bRvhBPC32yxi7YRA69+YRD+1mecKMseST4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fa:95:9b:2e:db:31:be:ac:2c:29:30:c1:15:62:9e:a5:c6:4c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Aug 21 18:47:05 2025 GMT Not After : Aug 25 01:04:05 2025 GMT Subject: CN=BF7BA7C08A74979AEF08CEE561B5D225B67453F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:06:67:c0:55:1e:b2:80:33:99:eb:e3:72:e9: 9b:d5:bd:0b:ac:55:d1:84:c6:b1:82:e2:19:40:31: 8a:4e:df:9a:c0:7b:20:74:a5:28:64:ba:14:35:8c: 76:7b:5e:b6:0e:e8:0e:2f:e0:a8:4a:57:e3:f1:63: f5:03:1f:32:9a:b4:eb:74:1a:a8:35:32:cc:77:e4: e4:57:ac:da:bd:33:6c:1b:41:fd:e4:f0:99:9c:25: 37:fd:48:fc:31:f9:fc:1b:8c:3e:a3:b7:6f:d2:12: 44:e5:27:5e:05:e3:7f:9e:c8:15:aa:78:2a:5f:74: 9a:86:0e:8e:b7:ed:9a:ed:85:a0:c2:6a:d4:bc:3a: 7c:1c:47:91:28:64:0c:92:ce:4e:8a:d6:ff:28:1b: c3:92:04:cd:45:1e:34:56:d3:c0:f4:04:ea:8b:88: cc:fc:02:16:56:b0:f8:d7:00:6e:bf:4c:36:98:52: 06:8a:bb:11:0a:5b:1a:92:8d:c7:ab:d0:de:05:e1: c4:d6:1a:5e:af:ac:f8:e7:f5:e0:2b:ce:63:d9:f1: 0f:52:44:17:81:db:c6:dd:f8:b3:df:02:13:fd:48: 2b:7a:b2:2d:d8:22:79:b2:95:e2:7b:dd:c9:6b:43: 26:0a:aa:a2:fe:1e:16:66:25:1d:e8:32:9d:35:2d: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:A7:C0:8A:74:97:9A:EF:08:CE:E5:61:B5:D2:25:B6:74:53:F7 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3e:d5:e7:98:11:6f:33:74:a9:17:e4:16:58:03:74:9b:ac: 4e:bf:2b:c0:9e:99:3d:78:c3:0b:bf:8e:cb:2e:f7:af:aa:68: 0f:85:a1:b4:af:b6:d0:62:53:a3:88:29:9b:dc:b2:ec:68:5e: 10:55:63:0d:a5:8a:55:20:ad:48:cb:13:13:2b:93:3b:fd:6e: 35:1d:c3:ef:7d:d5:84:da:61:52:6d:62:8c:d8:77:ff:d3:32: c7:47:1b:93:da:0c:40:3b:02:b9:6a:a8:bf:a2:98:74:c7:f5: dc:6d:b3:f8:15:a0:15:bc:7c:27:6e:ec:27:c0:48:ee:b0:36: e7:51:cf:15:71:79:bb:02:a9:10:0f:56:22:ba:64:cc:e6:8f: 98:ef:d9:cf:95:1a:81:1e:16:88:26:6a:61:aa:1f:7e:c9:3e: bf:26:47:ce:00:d3:54:1e:f5:c3:e9:1a:66:3e:e4:c4:bc:33: 3e:af:5d:5c:69:e1:e3:d7:25:af:9e:d4:ae:1c:8a:fc:76:7a: 4f:de:63:71:e8:68:a9:b3:d5:84:07:42:58:06:16:7f:d3:a9: f0:96:64:f6:86:2a:fc:c1:75:a1:d4:90:eb:40:a3:85:75:3f: f3:65:50:05:0f:62:d4:94:eb:e7:e0:d3:89:91:7b:cf:7b:84: dc:2c:1d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvqVmy7bMb6sLCkwwRVinqXGTOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTA4MjExODQ3MDVaFw0yNTA4MjUwMTA0MDVaMDMxMTAvBgNV BAMTKEJGN0JBN0MwOEE3NDk3OUFFRjA4Q0VFNTYxQjVEMjI1QjY3NDUzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBmfAVR6ygDOZ6+Ny6ZvVvQus VdGExrGC4hlAMYpO35rAeyB0pShkuhQ1jHZ7XrYO6A4v4KhKV+PxY/UDHzKatOt0 Gqg1Msx35ORXrNq9M2wbQf3k8JmcJTf9SPwx+fwbjD6jt2/SEkTlJ14F43+eyBWq eCpfdJqGDo637ZrthaDCatS8OnwcR5EoZAySzk6K1v8oG8OSBM1FHjRW08D0BOqL iMz8AhZWsPjXAG6/TDaYUgaKuxEKWxqSjcer0N4F4cTWGl6vrPjn9eArzmPZ8Q9S RBeB28bd+LPfAhP9SCt6si3YInmyleJ73clrQyYKqqL+HhZmJR3oMp01LdRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3unwIp0l5rvCM7lYbXSJbZ0U/cwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo+1eeYEW8zdKkX5BZYA3SbrE6/K8CemT14 wwu/jssu96+qaA+FobSvttBiU6OIKZvcsuxoXhBVYw2lilUgrUjLExMrkzv9bjUd w+991YTaYVJtYozYd//TMsdHG5PaDEA7ArlqqL+imHTH9dxts/gVoBW8fCdu7CfA SO6wNudRzxVxebsCqRAPViK6ZMzmj5jv2c+VGoEeFogmamGqH37JPr8mR84A01Qe 9cPpGmY+5MS8Mz6vXVxp4ePXJa+e1K4civx2ek/eY3HoaKmz1YQHQlgGFn/TqfCW ZPaGKvzBdaHUkOtAo4V1P/NlUAUPYtSU6+fg04mRe897hNwsHUk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:57 2025 by rpki-client